VYPR

CVEs

408,171 total · page 5713 of 8,164

AllCriticalHighKEV
  • CVE-2019-10088HigAug 2, 2019
    Apache
    Tika
    risk 0.58cvss 8.8epss 0.05

    A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should upgrade to 1.22 or later.

  • CVE-2019-10961HigAug 2, 2019
    Advantech
    Webaccess\/hmi Designer
    risk 0.58cvss 8.8epss 0.04

    In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, allowing remote code execution.

  • CVE-2017-18463HigAug 2, 2019
    CPanel
    Cpanel
    risk 0.51cvss 7.8epss 0.00

    cPanel before 62.0.17 allows code execution in the context of the root account via a long DocumentRoot path (SEC-225).

  • CVE-2017-18461MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.28cvss 4.3epss 0.01

    cPanel before 62.0.17 allows does not preserve security policy questions across an account rename (SEC-223).

  • CVE-2017-18460HigAug 2, 2019
    CPanel
    Cpanel
    risk 0.51cvss 7.8epss 0.00

    cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation (SEC-221).

  • CVE-2017-18459HigAug 2, 2019
    CPanel
    Cpanel
    risk 0.51cvss 7.8epss 0.00

    cPanel before 62.0.17 allows arbitrary code execution during account modification (SEC-220).

  • CVE-2017-18458LowAug 2, 2019
    CPanel
    Cpanel
    risk 0.21cvss 3.3epss 0.00

    cPanel before 62.0.17 allows file overwrite when renaming an account (SEC-219).

  • CVE-2017-18457MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.29cvss 4.4epss 0.00

    cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs (SEC-218).

  • CVE-2017-18456MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.40cvss 6.1epss 0.01

    cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface (SEC-217).

  • CVE-2017-18455LowAug 2, 2019
    CPanel
    Cpanel
    risk 0.18cvss 2.7epss 0.01

    In cPanel before 62.0.17, addon domain conversion did not require a package for resellers (SEC-208).

  • CVE-2017-18454MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.35cvss 5.4epss 0.01

    cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface (SEC-262).

  • CVE-2017-18453MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.32cvss 4.9epss 0.01

    cPanel before 64.0.21 does not preserve supplemental groups across account renames (SEC-260).

  • CVE-2017-18452MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.44cvss 6.7epss 0.00

    cPanel before 64.0.21 allows code execution via Rails configuration files (SEC-259).

  • CVE-2017-18451MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.35cvss 5.3epss 0.01

    cPanel before 64.0.21 allows attackers to read a user's crontab file during a short time interval upon a cPAddon upgrade (SEC-257).

  • CVE-2017-18450MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.29cvss 4.5epss 0.00

    cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convert_roundcube_mysql2sqlite (SEC-255).

  • CVE-2017-18449MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.36cvss 5.5epss 0.00

    cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convert_roundcube_mysql2sqlite (SEC-254).

  • CVE-2017-18448MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.35cvss 5.3epss 0.01

    cPanel before 64.0.21 allows certain file-read operations via a Serverinfo_manpage API call (SEC-252).

  • CVE-2017-18447MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.41cvss 6.3epss 0.01

    cPanel before 64.0.21 allows demo accounts to execute code via the ClamScanner_getsocket API (SEC-251).

  • CVE-2017-18446MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.41cvss 6.3epss 0.01

    cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API (SEC-250).

  • CVE-2017-18445MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.28cvss 4.3epss 0.01

    cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls (SEC-249).

  • CVE-2017-18444MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.35cvss 5.3epss 0.01

    cPanel before 64.0.21 allows demo accounts to execute SSH API commands (SEC-248).

  • CVE-2017-18443MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.38cvss 5.8epss 0.01

    cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding (SEC-247).

  • CVE-2017-18442MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.35cvss 5.3epss 0.01

    cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands (SEC-246).

  • CVE-2017-18441MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.33cvss 5.0epss 0.01

    cPanel before 64.0.21 allows demo accounts to redirect web traffic (SEC-245).

  • CVE-2017-18440MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.28cvss 4.3epss 0.01

    cPanel before 64.0.21 allows demo users to execute traceroute via api2 (SEC-244).

  • CVE-2017-18439MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.41cvss 6.3epss 0.01

    cPanel before 64.0.21 allows demo accounts to execute code via an ImageManager_dimensions API call (SEC-243).

  • CVE-2017-18438MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.41cvss 6.3epss 0.01

    cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls (SEC-242).

  • CVE-2017-18437MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.29cvss 4.4epss 0.00

    cPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240).

  • CVE-2017-18436LowAug 2, 2019
    CPanel
    Cpanel
    risk 0.23cvss 3.5epss 0.00

    cPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call (SEC-239).

  • CVE-2019-9141CriAug 2, 2019
    Zoneplayer
    ZInsVX.dll ActiveX Control
    risk 0.64cvss 9.8epss 0.02

    ZInsVX.dll ActiveX Control 2018.02 and earlier in Zoneplayer contains a vulnerability that could allow remote attackers to execute arbitrary files by setting the arguments to the ActiveX method. This can be leveraged for remote code execution.

  • CVE-2017-18435HigAug 2, 2019
    CPanel
    Cpanel
    risk 0.48cvss 7.3epss 0.01

    cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API (SEC-238).

  • CVE-2017-18434HigAug 2, 2019
    CPanel
    Cpanel
    risk 0.51cvss 7.8epss 0.00

    cPanel before 64.0.21 allows code execution in the context of the root account via a SET_VHOST_LANG_PACKAGE multilang adminbin call (SEC-237).

  • CVE-2017-18433HigAug 2, 2019
    CPanel
    Cpanel
    risk 0.57cvss 8.8epss 0.02

    cPanel before 64.0.21 allows code execution by webmail and demo accounts via a store_filter API call (SEC-236).

  • CVE-2017-18432HigAug 2, 2019
    CPanel
    Cpanel
    risk 0.51cvss 7.8epss 0.00

    In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password (SEC-234).

  • CVE-2017-18431HigAug 2, 2019
    CPanel
    Cpanel
    risk 0.49cvss 7.5epss 0.01

    cPanel before 66.0.1 does not reliably perform suspend/unsuspend operations on accounts (CPANEL-13941).

  • CVE-2017-18430MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.31cvss 4.7epss 0.01

    In cPanel before 66.0.2, user and group ownership may be incorrectly set when using reassign_post_terminate_cruft (SEC-294).

  • CVE-2017-18429LowAug 2, 2019
    CPanel
    Cpanel
    risk 0.21cvss 3.3epss 0.00

    In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination (SEC-291).

  • CVE-2017-18428LowAug 2, 2019
    CPanel
    Cpanel
    risk 0.16cvss 2.5epss 0.00

    In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing (SEC-290).

  • CVE-2017-18427LowAug 2, 2019
    CPanel
    Cpanel
    risk 0.21cvss 3.3epss 0.00

    In cPanel before 66.0.2, weak log-file permissions can occur after account modification (SEC-289).

  • CVE-2017-18426LowAug 2, 2019
    CPanel
    Cpanel
    risk 0.18cvss 2.7epss 0.01

    cPanel before 66.0.2 allows resellers to read other accounts' domain log files (SEC-288).

  • CVE-2017-18425LowAug 2, 2019
    CPanel
    Cpanel
    risk 0.16cvss 2.5epss 0.00

    In cPanel before 66.0.2, the cpdavd_error_log file can be created with weak permissions (SEC-280).

  • CVE-2017-18424LowAug 2, 2019
    CPanel
    Cpanel
    risk 0.21cvss 3.3epss 0.00

    In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt (SEC-274).

  • CVE-2017-18423LowAug 2, 2019
    CPanel
    Cpanel
    risk 0.21cvss 3.3epss 0.00

    In cPanel before 66.0.2, domain log files become readable after log processing (SEC-273).

  • CVE-2017-18422LowAug 2, 2019
    CPanel
    Cpanel
    risk 0.21cvss 3.3epss 0.00

    In cPanel before 66.0.2, EasyApache 4 conversion sets weak domlog ownership and permissions (SEC-272).

  • CVE-2017-18421LowAug 2, 2019
    CPanel
    Cpanel
    risk 0.21cvss 3.3epss 0.00

    cPanel before 66.0.2 allows demo accounts to create databases and users (SEC-271).

  • CVE-2017-18420MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.35cvss 5.4epss 0.01

    cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing (SEC-269).

  • CVE-2017-18419MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.35cvss 5.4epss 0.01

    cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation (SEC-266).

  • CVE-2017-18418MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.35cvss 5.4epss 0.01

    cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations (SEC-265).

  • CVE-2017-18417MedAug 2, 2019
    CPanel
    Cpanel
    risk 0.35cvss 5.4epss 0.01

    cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation (SEC-263).

  • CVE-2019-5501HigAug 2, 2019
    NetApp
    Data Ontap
    risk 0.49cvss 7.5epss 0.02

    Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account information to unauthenticated remote attackers.